This is a senior individual contributor role where success comes through technical expertise, collaboration and influence. You’ll combine hands-on application security work with ownership of key AppSec initiatives, helping teams identify and reduce risk, improve security tooling and drive measurable security improvements across the organization.
You’ll work across a diverse technology landscape, contributing to security reviews, vulnerability management, developer enablement and the evolution of our application security program. We’re looking for someone who enjoys solving complex security challenges, partnering with engineering teams and using AI to improve security and development workflows.
IN THIS ROLE, YOU WILL
Partner with engineering, platform and product teams to integrate security into development workflows and release processes.
Perform application security reviews, threat modeling and security assessments for new features, services and architectural changes.
Provide guidance on secure coding practices, vulnerability remediation and application hardening.
Evaluate, implement and optimize application security tooling, including SAST, DAST and Software Composition Analysis (SCA).
Integrate security controls and testing into CI/CD pipelines and engineering workflows.
Support vulnerability triage, prioritization and remediation efforts across teams.
Contribute to incident investigations, root cause analysis and long-term security improvements.
Develop security standards, documentation, playbooks and developer guidance.
Define and track security metrics to improve visibility, coverage and risk reduction.
Evaluate emerging security technologies and help drive adoption of tools that create value for engineering teams.
Promote secure AI-assisted development practices and responsible use of AI technologies.
Foster a strong security culture through collaboration, enablement and knowledge sharing.
ABOUT YOU
Experience in Application Security, Product Security, Secure Software Development or a related field.
Strong understanding of application vulnerabilities, secure coding principles and frameworks such as OWASP Top 10.
Experience with application security testing technologies, including SAST, DAST, SCA and vulnerability management platforms.
Ability to understand source code, infrastructure definitions, configuration files and CI/CD pipelines.
Strong understanding of modern software development practices and developer workflows.
Experience integrating security controls into development and delivery pipelines.
Ability to assess security risks pragmatically and communicate effectively with both technical and non-technical stakeholders.
Strong collaboration skills and experience working across engineering, product and security teams.
Analytical mindset with a data-informed approach to prioritization and decision making.
Experience evaluating security tools, technologies and vendor solutions.
Familiarity with AI-assisted engineering workflows and secure adoption of AI technologies.
Strong written and verbal English communication skills.
Experience in one or more of the following areas is a plus
API Security
Mobile Application Security (iOS and Android)
Secrets Management and Credential Security
Cloud-native platforms and modern application architectures
Security enablement programs and developer education initiatives
Scaling application security programs in large and complex engineering environments
WHAT’S NEXT
The interview process consists of four stages.
You’ll first meet Curtis, the Hiring Manager, to discuss your experience, the role and the team.
The next two interview rounds will be with members of the Application Security team and will focus on your technical experience, approach to security challenges and collaboration style.
The final interview will be with Curtis’ manager.
